diff --git a/.env.example b/.env.example index fc89a7e..d22d4d1 100644 --- a/.env.example +++ b/.env.example @@ -33,6 +33,8 @@ RESEND_FROM_EMAIL=no-reply@waternetwork.cn EMAIL_CODE_MINUTES=10 EMAIL_CODE_RESEND_SECONDS=60 EMAIL_CODE_MAX_ATTEMPTS=5 +# 邮箱验证码通过后，用于改密和找回密码的短时授权（分钟）。 +FRESH_AUTH_MINUTES=5 # 受信设备的有效期（天）。 TRUSTED_DEVICE_DAYS=30 diff --git a/app/config.py b/app/config.py index a7f244e..2d3deb5 100644 --- a/app/config.py +++ b/app/config.py @@ -2,6 +2,7 @@ from __future__ import annotations import os import secrets +from datetime import timedelta from pathlib import Path from dotenv import dotenv_values @@ -45,20 +46,33 @@ def app_env() -> str: return os.environ.get("APP_ENV", "development").strip().lower() or "development" +def database_url() -> str: + """返回数据库地址，并将相对 SQLite 路径固定到项目目录。""" + value = os.environ.get("DATABASE_URL", "").strip() + if not value: + return f"sqlite:///{DATA_DIR / 'pipe_survival_0331.db'}" + prefix = "sqlite:///" + if value.startswith(prefix) and not value.startswith("sqlite:////"): + return f"sqlite:///{BASE_DIR / value.removeprefix(prefix)}" + return value + + class Config: APP_ENV = app_env() DEBUG = env_bool("DEBUG", APP_ENV in {"dev", "development", "local"}) SECRET_KEY = os.environ.get("SECRET_KEY") or secrets.token_hex(32) SECRET_KEY_GENERATED = not bool(os.environ.get("SECRET_KEY")) - SQLALCHEMY_DATABASE_URI = os.environ.get( - "DATABASE_URL", - f"sqlite:///{DATA_DIR / 'pipe_survival_0331.db'}", - ) + SQLALCHEMY_DATABASE_URI = database_url() SQLALCHEMY_TRACK_MODIFICATIONS = False MAX_CONTENT_LENGTH = env_int("MAX_UPLOAD_BYTES", 16 * 1024 * 1024) SESSION_COOKIE_HTTPONLY = True SESSION_COOKIE_SAMESITE = "Lax" SESSION_COOKIE_SECURE = env_bool("SESSION_COOKIE_SECURE", APP_ENV == "production") + # 仅在用户主动勾选“保持登录状态”时使用。 + REMEMBER_COOKIE_DURATION = timedelta(days=7) + REMEMBER_COOKIE_HTTPONLY = True + REMEMBER_COOKIE_SECURE = SESSION_COOKIE_SECURE + REMEMBER_COOKIE_SAMESITE = "Lax" FUSION_MODEL_CORE_DIR = os.environ.get( "FUSION_MODEL_CORE_DIR", str(BASE_DIR / "model_core"), @@ -74,6 +88,8 @@ class Config: EMAIL_CODE_MINUTES = env_int("EMAIL_CODE_MINUTES", 10) EMAIL_CODE_RESEND_SECONDS = env_int("EMAIL_CODE_RESEND_SECONDS", 60) EMAIL_CODE_MAX_ATTEMPTS = env_int("EMAIL_CODE_MAX_ATTEMPTS", 5) + # 邮箱验证码通过后，可用于高风险操作的短时授权。 + FRESH_AUTH_MINUTES = env_int("FRESH_AUTH_MINUTES", 5) TRUSTED_DEVICE_DAYS = env_int("TRUSTED_DEVICE_DAYS", 30) diff --git a/app/email.py b/app/email.py index 16d7b77..a386903 100644 --- a/app/email.py +++ b/app/email.py @@ -1,6 +1,7 @@ from __future__ import annotations import logging +from html import escape from typing import Any import resend @@ -15,6 +16,39 @@ class EmailDeliveryError(RuntimeError): """Raised when Resend rejects or cannot deliver an email request.""" +def render_transactional_email(*, title: str, content: str) -> str: + """Render a conservative table-based email layout for broad client support.""" + return f""" + +
+ + + + +
供水管道健康评估系统

{escape(title)}

{content}
此邮件由系统自动发送，请勿直接回复。
如非本人操作，请忽略此邮件并及时检查账户安全。
+
+""" + + +def verification_code_email(*, code: str, minutes: int, purpose: str) -> str: + """Render the verification email without exposing dynamic HTML to callers.""" + content = f""" +

你正在进行{escape(purpose)}。请在 {minutes} 分钟内输入下方验证码。

+
{escape(code)}
+

验证码仅可使用一次，请勿向任何人透露。

""" + return render_transactional_email(title="邮箱验证码", content=content) + + +def password_reset_notice_email(*, username: str, reset_url: str) -> str: + """Render an administrator-initiated password reset notification.""" + safe_url = escape(reset_url, quote=True) + content = f""" +

{escape(username)}，管理员已要求你重置密码。

+

请通过下方按钮进入找回密码流程，系统会向本邮箱发送一次性验证码。

+

重置密码

""" + return render_transactional_email(title="请重置密码", content=content) + + def send_transactional_email(*, to: str, subject: str, html: str) -> dict[str, Any]: """Send one application-generated email through Resend.""" api_key = current_app.config["RESEND_API_KEY"] diff --git a/app/routes.py b/app/routes.py index 950b68c..b9fd8d1 100644 --- a/app/routes.py +++ b/app/routes.py @@ -4,14 +4,20 @@ import hashlib import os import re import secrets -from datetime import timedelta +from datetime import datetime, timedelta from flask import Blueprint, abort, current_app, flash, jsonify, redirect, render_template, request, send_file, session, url_for from flask_login import current_user, login_required, login_user, logout_user from sqlalchemy.orm import joinedload from .config import BASE_DIR -from .email import EmailConfigurationError, EmailDeliveryError, send_transactional_email +from .email import ( + EmailConfigurationError, + EmailDeliveryError, + password_reset_notice_email, + send_transactional_email, + verification_code_email, +) from .extensions import db from .models import AppSetting, EmailVerificationCode, TrustedDevice, UploadRecord, User from .prediction import PredictionError, run_prediction @@ -52,7 +58,47 @@ def valid_email(value: str) -> bool: def valid_password(password: str) -> bool: - return 12 <= len(password) <= 128 + return ( + 12 <= len(password) <= 128 + and not any(character.isspace() for character in password) + and any(character.islower() for character in password) + and any(character.isupper() for character in password) + and any(character.isdigit() for character in password) + and any(not character.isalnum() for character in password) + ) + + +PASSWORD_RULE_MESSAGE = "密码须为12至128位，包含大写字母、小写字母、数字和特殊字符，且不能含空格。" + + +def grant_fresh_authorization(user: User, purpose: str) -> None: + """Grant a short, session-bound authorization after successful email MFA.""" + session[f"fresh_auth_{purpose}"] = { + "user_id": user.id, + "auth_version": user.auth_version, + "expires_at": ( + utc_now() + timedelta(minutes=current_app.config["FRESH_AUTH_MINUTES"]) + ).isoformat(), + } + + +def has_fresh_authorization(user: User, purpose: str) -> bool: + authorization = session.get(f"fresh_auth_{purpose}") + if not isinstance(authorization, dict): + return False + try: + expires_at = datetime.fromisoformat(authorization["expires_at"]) + except (KeyError, TypeError, ValueError): + return False + return ( + authorization.get("user_id") == user.id + and authorization.get("auth_version") == user.auth_version + and expires_at > utc_now() + ) + + +def consume_fresh_authorization(purpose: str) -> None: + session.pop(f"fresh_auth_{purpose}", None) def render_auth_template(mode: str, status_code: int = 200, captcha: str = ""): @@ -136,10 +182,10 @@ def issue_email_code(email: str, purpose: str) -> bool: send_transactional_email( to=email, subject=f"供水管道健康评估系统：{EMAIL_CODE_LABELS.get(purpose, '身份验证')}验证码", - html=( - "

你的验证码是：

" - f"

{code}

" - f"

验证码 {current_app.config['EMAIL_CODE_MINUTES']} 分钟内有效，请勿向他人透露。

" + html=verification_code_email( + code=code, + minutes=current_app.config["EMAIL_CODE_MINUTES"], + purpose=EMAIL_CODE_LABELS.get(purpose, "身份验证"), ), ) except (EmailConfigurationError, EmailDeliveryError): @@ -212,7 +258,13 @@ def login_response(user: User, remember: bool, trust_device: bool = False): def verification_page(title: str, purpose: str): - return render_template("verification.html", title=title, purpose=purpose, email=session.get("pending_email", "")) + return render_template( + "verification.html", + title=title, + purpose=purpose, + email=session.get("pending_email", ""), + resend_seconds=current_app.config["EMAIL_CODE_RESEND_SECONDS"], + ) @bp.route("/") @@ -248,7 +300,7 @@ def register(): if not registration_allowed(): return render_auth_error("register", "当前未开放自助注册，请联系管理员。", 403) if not username or len(username) > 100: return render_auth_error("register", "显示名不能为空且不能超过100个字符") if not valid_email(email): return render_auth_error("register", "请输入有效的邮箱地址") - if not valid_password(password): return render_auth_error("register", "密码长度应为12至128位") + if not valid_password(password): return render_auth_error("register", PASSWORD_RULE_MESSAGE) if User.query.filter((User.username == username) | (User.email == email)).first(): return render_auth_error("register", "显示名或邮箱已被使用") user = User(username=username, email=email, is_admin=False, is_active_account=False) user.set_password(password); db.session.add(user); db.session.commit() @@ -271,7 +323,9 @@ def verify_email(purpose: str): user.email_verified_at = utc_now(); user.is_active_account = True; db.session.commit(); session.clear(); flash("邮箱验证成功，请登录。", "info"); return redirect(url_for("main.login")) if purpose == "login": remember = bool(session.get("pending_remember")); session.clear(); return login_response(user, remember, trust_device=True) - if purpose == "reset": session["reset_verified_user_id"] = user.id; return redirect(url_for("main.set_password")) + if purpose == "reset": + grant_fresh_authorization(user, "password_reset") + return redirect(url_for("main.set_password")) if purpose == "change_email_old": new_email = session.get("new_email", "") session.update(pending_email=new_email, pending_purpose="change_email_new") @@ -282,7 +336,8 @@ def verify_email(purpose: str): if User.query.filter(User.email == email, User.id != user.id).first(): flash("该邮箱已被使用。", "error"); return redirect(url_for("main.account_security")) user.email = email; user.email_verified_at = utc_now(); user.revoke_authentication(); TrustedDevice.query.filter_by(user_id=user.id).delete(); db.session.commit(); logout_user(); session.clear(); flash("邮箱已更新，请重新登录。", "info"); return redirect(url_for("main.login")) - session["password_change_verified"] = True; return redirect(url_for("main.account_security")) + grant_fresh_authorization(user, "password_change") + return redirect(url_for("main.account_security")) @bp.route("/verify//resend", methods=["POST"]) @@ -307,20 +362,33 @@ def forgot_password(): @bp.route("/set-password", methods=["GET", "POST"]) def set_password(): - user = db.session.get(User, session.get("reset_verified_user_id")) - if not user: return redirect(url_for("main.forgot_password")) + authorization = session.get("fresh_auth_password_reset") + user = db.session.get(User, authorization.get("user_id")) if isinstance(authorization, dict) else None + if not user or not has_fresh_authorization(user, "password_reset"): + consume_fresh_authorization("password_reset") + return redirect(url_for("main.forgot_password")) if request.method == "GET": return render_template("set_password.html", title="设置新密码", action=url_for("main.set_password")) password, confirm = request.form.get("password", ""), request.form.get("password_confirm", "") - if not valid_password(password) or password != confirm: flash("密码应为12至128位，且两次输入一致。", "error"); return render_template("set_password.html", title="设置新密码", action=url_for("main.set_password")), 400 - user.set_password(password); user.revoke_authentication(); TrustedDevice.query.filter_by(user_id=user.id).delete(); db.session.commit(); session.clear(); flash("密码已重置，请重新登录。", "info"); return redirect(url_for("main.login")) + if not valid_password(password) or password != confirm: flash(f"{PASSWORD_RULE_MESSAGE} 两次输入必须一致。", "error"); return render_template("set_password.html", title="设置新密码", action=url_for("main.set_password")), 400 + user.set_password(password); user.revoke_authentication(); TrustedDevice.query.filter_by(user_id=user.id).delete(); db.session.commit(); consume_fresh_authorization("password_reset"); session.clear(); flash("密码已重置，请重新登录。", "info"); return redirect(url_for("main.login")) @bp.route("/account/security", methods=["GET", "POST"]) @login_required def account_security(): - if request.method == "GET": return render_template("account_security.html") + if request.method == "GET": + return render_template( + "account_security.html", + password_change_authorized=has_fresh_authorization( + current_user, + "password_change", + ), + ) action = request.form.get("action") if action == "revoke_devices": + if not current_user.check_password(request.form.get("current_password", "")): + flash("当前密码不正确，未撤销受信设备。", "error") + return redirect(url_for("main.account_security")) current_user.revoke_authentication(); TrustedDevice.query.filter_by(user_id=current_user.id).delete(); db.session.commit(); logout_user(); flash("所有受信设备已撤销，请重新登录。", "info"); return redirect(url_for("main.login")) if not current_user.check_password(request.form.get("current_password", "")): flash("当前密码不正确。", "error"); return redirect(url_for("main.account_security")) @@ -339,10 +407,12 @@ def account_security(): @bp.route("/account/change-password", methods=["POST"]) @login_required def change_password(): - if not session.pop("password_change_verified", False): abort(403) + if not has_fresh_authorization(current_user, "password_change"): + consume_fresh_authorization("password_change") + abort(403) password, confirm = request.form.get("password", ""), request.form.get("password_confirm", "") - if not valid_password(password) or password != confirm or current_user.check_password(password): flash("密码应为12至128位、两次一致且不能与当前密码相同。", "error"); return redirect(url_for("main.account_security")) - current_user.set_password(password); current_user.revoke_authentication(); TrustedDevice.query.filter_by(user_id=current_user.id).delete(); db.session.commit(); logout_user(); flash("密码已更新，请重新登录。", "info"); return redirect(url_for("main.login")) + if not valid_password(password) or password != confirm or current_user.check_password(password): flash(f"{PASSWORD_RULE_MESSAGE} 两次输入必须一致，且不能与当前密码相同。", "error"); return redirect(url_for("main.account_security")) + current_user.set_password(password); current_user.revoke_authentication(); TrustedDevice.query.filter_by(user_id=current_user.id).delete(); db.session.commit(); consume_fresh_authorization("password_change"); logout_user(); flash("密码已更新，请重新登录。", "info"); return redirect(url_for("main.login")) @bp.route("/logout", methods=["POST"]) @@ -379,7 +449,10 @@ def admin_password_reset(user_id: int): send_transactional_email( to=user.email, subject="供水管道健康评估系统：请重置密码", - html=f"

{user.username}，管理员已要求你重置密码。

请访问 找回密码，系统会将一次性验证码发送到本邮箱。

", + html=password_reset_notice_email( + username=user.username, + reset_url=url_for("main.forgot_password", _external=True), + ), ) except (EmailConfigurationError, EmailDeliveryError): return jsonify({"error": "邮件发送失败"}), 503 diff --git a/docker-compose.yml b/docker-compose.yml index da1ead0..9f0a486 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -23,6 +23,7 @@ services: EMAIL_CODE_MINUTES: ${EMAIL_CODE_MINUTES:-10} EMAIL_CODE_RESEND_SECONDS: ${EMAIL_CODE_RESEND_SECONDS:-60} EMAIL_CODE_MAX_ATTEMPTS: ${EMAIL_CODE_MAX_ATTEMPTS:-5} + FRESH_AUTH_MINUTES: ${FRESH_AUTH_MINUTES:-5} TRUSTED_DEVICE_DAYS: ${TRUSTED_DEVICE_DAYS:-30} SESSION_COOKIE_SECURE: ${SESSION_COOKIE_SECURE:-true} ports: diff --git a/static/css/app.css b/static/css/app.css index dda16a5..9bb28c8 100644 --- a/static/css/app.css +++ b/static/css/app.css @@ -1,3 +1,3 @@ @font-face{font-family:Material Symbols Outlined;font-style:normal;font-weight:400;font-display:block;src:url(../fonts/material-symbols-outlined.ttf) format("truetype")}*,:after,:before{--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-scale-y:1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness:proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(59,130,246,.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;--tw-shadow:0 0 #0000;--tw-shadow-colored:0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }::backdrop{--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-scale-y:1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness:proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(59,130,246,.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;--tw-shadow:0 0 #0000;--tw-shadow-colored:0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: } -/*! tailwindcss v3.4.19 | MIT License | https://tailwindcss.com*/*,:after,:before{box-sizing:border-box;border:0 solid #e5e7eb}:after,:before{--tw-content:""}:host,html{line-height:1.5;-webkit-text-size-adjust:100%;-moz-tab-size:4;-o-tab-size:4;tab-size:4;font-family:ui-sans-serif,system-ui,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji;font-feature-settings:normal;font-variation-settings:normal;-webkit-tap-highlight-color:transparent}body{margin:0;line-height:inherit}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,pre,samp{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace;font-feature-settings:normal;font-variation-settings:normal;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}button,input,optgroup,select,textarea{font-family:inherit;font-feature-settings:inherit;font-variation-settings:inherit;font-size:100%;font-weight:inherit;line-height:inherit;letter-spacing:inherit;color:inherit;margin:0;padding:0}button,select{text-transform:none}button,input:where([type=button]),input:where([type=reset]),input:where([type=submit]){-webkit-appearance:button;background-color:transparent;background-image:none}:-moz-focusring{outline:auto}:-moz-ui-invalid{box-shadow:none}progress{vertical-align:baseline}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}summary{display:list-item}blockquote,dd,dl,figure,h1,h2,h3,h4,h5,h6,hr,p,pre{margin:0}fieldset{margin:0}fieldset,legend{padding:0}menu,ol,ul{list-style:none;margin:0;padding:0}dialog{padding:0}textarea{resize:vertical}input::-moz-placeholder,textarea::-moz-placeholder{opacity:1;color:#9ca3af}input::placeholder,textarea::placeholder{opacity:1;color:#9ca3af}[role=button],button{cursor:pointer}:disabled{cursor:default}audio,canvas,embed,iframe,img,object,svg,video{display:block;vertical-align:middle}img,video{max-width:100%;height:auto}[hidden]:where(:not([hidden=until-found])){display:none}input:where(:not([type])),input:where([type=date]),input:where([type=datetime-local]),input:where([type=email]),input:where([type=month]),input:where([type=number]),input:where([type=password]),input:where([type=search]),input:where([type=tel]),input:where([type=text]),input:where([type=time]),input:where([type=url]),input:where([type=week]),select,select:where([multiple]),textarea{-webkit-appearance:none;-moz-appearance:none;appearance:none;background-color:#fff;border-color:#6b7280;border-width:1px;border-radius:0;padding:.5rem .75rem;font-size:1rem;line-height:1.5rem;--tw-shadow:0 0 #0000}input:where(:not([type])):focus,input:where([type=date]):focus,input:where([type=datetime-local]):focus,input:where([type=email]):focus,input:where([type=month]):focus,input:where([type=number]):focus,input:where([type=password]):focus,input:where([type=search]):focus,input:where([type=tel]):focus,input:where([type=text]):focus,input:where([type=time]):focus,input:where([type=url]):focus,input:where([type=week]):focus,select:focus,select:where([multiple]):focus,textarea:focus{outline:2px solid transparent;outline-offset:2px;--tw-ring-inset:var(--tw-empty,/*!*/ /*!*/);--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:#2563eb;--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(1px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow);border-color:#2563eb}input::-moz-placeholder,textarea::-moz-placeholder{color:#6b7280;opacity:1}input::placeholder,textarea::placeholder{color:#6b7280;opacity:1}::-webkit-datetime-edit-fields-wrapper{padding:0}::-webkit-date-and-time-value{min-height:1.5em;text-align:inherit}::-webkit-datetime-edit{display:inline-flex}::-webkit-datetime-edit,::-webkit-datetime-edit-day-field,::-webkit-datetime-edit-hour-field,::-webkit-datetime-edit-meridiem-field,::-webkit-datetime-edit-millisecond-field,::-webkit-datetime-edit-minute-field,::-webkit-datetime-edit-month-field,::-webkit-datetime-edit-second-field,::-webkit-datetime-edit-year-field{padding-top:0;padding-bottom:0}select{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='none' viewBox='0 0 20 20'%3E%3Cpath stroke='%236b7280' stroke-linecap='round' stroke-linejoin='round' stroke-width='1.5' d='m6 8 4 4 4-4'/%3E%3C/svg%3E");background-position:right .5rem center;background-repeat:no-repeat;background-size:1.5em 1.5em;padding-right:2.5rem;-webkit-print-color-adjust:exact;print-color-adjust:exact}select:where([multiple]),select:where([size]:not([size="1"])){background-image:none;background-position:0 0;background-repeat:unset;background-size:initial;padding-right:.75rem;-webkit-print-color-adjust:unset;print-color-adjust:unset}input:where([type=checkbox]),input:where([type=radio]){-webkit-appearance:none;-moz-appearance:none;appearance:none;padding:0;-webkit-print-color-adjust:exact;print-color-adjust:exact;display:inline-block;vertical-align:middle;background-origin:border-box;-webkit-user-select:none;-moz-user-select:none;user-select:none;flex-shrink:0;height:1rem;width:1rem;color:#2563eb;background-color:#fff;border-color:#6b7280;border-width:1px;--tw-shadow:0 0 #0000}input:where([type=checkbox]){border-radius:0}input:where([type=radio]){border-radius:100%}input:where([type=checkbox]):focus,input:where([type=radio]):focus{outline:2px solid transparent;outline-offset:2px;--tw-ring-inset:var(--tw-empty,/*!*/ /*!*/);--tw-ring-offset-width:2px;--tw-ring-offset-color:#fff;--tw-ring-color:#2563eb;--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(2px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow)}input:where([type=checkbox]):checked,input:where([type=radio]):checked{border-color:transparent;background-color:currentColor;background-size:100% 100%;background-position:50%;background-repeat:no-repeat}input:where([type=checkbox]):checked{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' viewBox='0 0 16 16'%3E%3Cpath d='M12.207 4.793a1 1 0 0 1 0 1.414l-5 5a1 1 0 0 1-1.414 0l-2-2a1 1 0 0 1 1.414-1.414L6.5 9.086l4.293-4.293a1 1 0 0 1 1.414 0'/%3E%3C/svg%3E")}@media (forced-colors:active) {input:where([type=checkbox]):checked{-webkit-appearance:auto;-moz-appearance:auto;appearance:auto}}input:where([type=radio]):checked{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' viewBox='0 0 16 16'%3E%3Ccircle cx='8' cy='8' r='3'/%3E%3C/svg%3E")}@media (forced-colors:active) {input:where([type=radio]):checked{-webkit-appearance:auto;-moz-appearance:auto;appearance:auto}}input:where([type=checkbox]):checked:focus,input:where([type=checkbox]):checked:hover,input:where([type=radio]):checked:focus,input:where([type=radio]):checked:hover{border-color:transparent;background-color:currentColor}input:where([type=checkbox]):indeterminate{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='none' viewBox='0 0 16 16'%3E%3Cpath stroke='%23fff' stroke-linecap='round' stroke-linejoin='round' stroke-width='2' d='M4 8h8'/%3E%3C/svg%3E");border-color:transparent;background-color:currentColor;background-size:100% 100%;background-position:50%;background-repeat:no-repeat}@media (forced-colors:active) {input:where([type=checkbox]):indeterminate{-webkit-appearance:auto;-moz-appearance:auto;appearance:auto}}input:where([type=checkbox]):indeterminate:focus,input:where([type=checkbox]):indeterminate:hover{border-color:transparent;background-color:currentColor}input:where([type=file]){background:unset;border-color:inherit;border-width:0;border-radius:0;padding:0;font-size:unset;line-height:inherit}input:where([type=file]):focus{outline:1px solid ButtonText;outline:1px auto -webkit-focus-ring-color}body,h1,h2,h3,h4{font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif}.material-symbols-outlined{font-family:Material Symbols Outlined;font-weight:400;font-style:normal;font-size:24px;letter-spacing:normal;text-transform:none;width:1em;height:1em;min-width:1em;flex:0 0 auto;overflow:hidden;word-wrap:normal;direction:ltr;vertical-align:middle;font-variation-settings:"FILL" 0,"wght" 400,"GRAD" 0,"opsz" 24}.material-symbols-outlined,.ui-btn{line-height:1;display:inline-flex;align-items:center;justify-content:center;white-space:nowrap}.ui-btn{box-sizing:border-box;min-height:44px;height:44px;gap:.5rem;border-radius:.375rem;border:1px solid transparent;padding:0 1rem;font-size:.875rem;font-weight:700;transition:background-color .15s ease,border-color .15s ease,color .15s ease,box-shadow .15s ease}.ui-btn-lg{min-height:52px;height:52px;font-size:.875rem}.ui-btn-sm{min-height:40px;height:40px;padding:0 .75rem}.ui-btn-compact{min-height:34px;height:34px;padding:0 .65rem;gap:.35rem;font-size:.8125rem}.ui-btn-field{min-height:50px;height:50px}.ui-btn-primary{background:#005eb8;color:#fff;box-shadow:0 18px 34px rgba(15,23,42,.06)}.ui-btn-primary:hover{background:#0c4188}.ui-btn-secondary{border-color:#e2e8f0;background:#fff;color:#334155;box-shadow:0 1px 2px rgba(15,23,42,.04)}.ui-btn-secondary:hover{border-color:#005eb8;color:#005eb8}.ui-btn:disabled,.ui-btn[aria-disabled=true]{cursor:not-allowed;box-shadow:none;opacity:.7}.ui-btn[aria-busy=true]{pointer-events:none}.ui-btn-primary:disabled{background:#cbd5e1}.ui-btn .material-symbols-outlined,.ui-btn-icon{width:20px;height:20px;flex:0 0 20px;font-size:20px}.ui-icon-btn{display:inline-flex;width:28px;height:28px;flex:0 0 28px;justify-content:center;transition:background-color .15s ease,color .15s ease}.ui-action-row,.ui-icon-btn{box-sizing:border-box;align-items:center;border-radius:.375rem;line-height:1}.ui-action-row{display:flex;min-height:44px;justify-content:space-between;gap:.75rem;border:1px solid #e2e8f0;padding:0 .75rem;font-size:.875rem;font-weight:700;transition:border-color .15s ease,color .15s ease}.ui-action-row:hover{border-color:#005eb8;color:#005eb8}.spinner{display:inline-flex;width:20px;height:20px;flex:0 0 20px;border-radius:9999px;border:2px solid hsla(0,0%,100%,.35);border-top-color:#fff;animation:spin .75s linear infinite}.ui-btn-secondary .spinner{border-color:#005eb8 rgba(0,94,184,.22) rgba(0,94,184,.22)}.sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border-width:0}.pointer-events-none{pointer-events:none}.static{position:static}.fixed{position:fixed}.absolute{position:absolute}.relative{position:relative}.sticky{position:sticky}.left-1\/2{left:50%}.left-4{left:1rem}.left-7{left:1.75rem}.right-7{right:1.75rem}.top-0{top:0}.top-1\/2{top:50%}.top-20{top:5rem}.top-6{top:1.5rem}.z-30{z-index:30}.z-50{z-index:50}.order-1{order:1}.order-2{order:2}.order-3{order:3}.order-4{order:4}.mx-auto{margin-left:auto;margin-right:auto}.-mr-1{margin-right:-.25rem}.-mt-1{margin-top:-.25rem}.mb-10{margin-bottom:2.5rem}.mb-2{margin-bottom:.5rem}.mb-4{margin-bottom:1rem}.mb-5{margin-bottom:1.25rem}.mb-6{margin-bottom:1.5rem}.mb-7{margin-bottom:1.75rem}.mb-8{margin-bottom:2rem}.mt-1{margin-top:.25rem}.mt-2{margin-top:.5rem}.mt-3{margin-top:.75rem}.mt-4{margin-top:1rem}.mt-5{margin-top:1.25rem}.mt-6{margin-top:1.5rem}.block{display:block}.flex{display:flex}.inline-flex{display:inline-flex}.table{display:table}.grid{display:grid}.hidden{display:none}.h-10{height:2.5rem}.h-14{height:3.5rem}.h-16{height:4rem}.h-8{height:2rem}.h-9{height:2.25rem}.h-\[460px\]{height:460px}.h-\[50px\]{height:50px}.h-\[520px\]{height:520px}.h-\[710px\]{height:710px}.h-\[900px\]{height:900px}.h-\[calc\(100vh-230px\)\]{height:calc(100vh - 230px)}.h-full{height:100%}.h-px{height:1px}.max-h-full{max-height:100%}.min-h-0{min-height:0}.min-h-\[360px\]{min-height:360px}.min-h-\[520px\]{min-height:520px}.min-h-\[560px\]{min-height:560px}.min-h-\[620px\]{min-height:620px}.min-h-\[76px\]{min-height:76px}.min-h-screen{min-height:100vh}.w-14{width:3.5rem}.w-8{width:2rem}.w-9{width:2.25rem}.w-\[calc\(100vw-2rem\)\]{width:calc(100vw - 2rem)}.w-fit{width:-moz-fit-content;width:fit-content}.w-full{width:100%}.w-px{width:1px}.min-w-0{min-width:0}.min-w-10{min-width:2.5rem}.min-w-\[150px\]{min-width:150px}.min-w-full{min-width:100%}.max-w-3xl{max-width:48rem}.max-w-7xl{max-width:80rem}.max-w-\[120px\]{max-width:120px}.max-w-\[360px\]{max-width:360px}.max-w-\[420px\]{max-width:420px}.max-w-\[430px\]{max-width:430px}.max-w-\[440px\]{max-width:440px}.flex-1{flex:1 1 0%}.shrink-0{flex-shrink:0}.-translate-x-1\/2{--tw-translate-x:-50%}.-translate-x-1\/2,.-translate-y-1\/2{transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.-translate-y-1\/2{--tw-translate-y:-50%}.translate-y-0{--tw-translate-y:0px}.translate-y-0,.translate-y-3{transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.translate-y-3{--tw-translate-y:0.75rem}.transform{transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.cursor-pointer{cursor:pointer}.resize{resize:both}.grid-cols-1{grid-template-columns:repeat(1,minmax(0,1fr))}.grid-cols-\[1fr_92px_44px\]{grid-template-columns:1fr 92px 44px}.flex-col{flex-direction:column}.flex-wrap{flex-wrap:wrap}.items-start{align-items:flex-start}.items-center{align-items:center}.items-stretch{align-items:stretch}.justify-center{justify-content:center}.justify-between{justify-content:space-between}.gap-1{gap:.25rem}.gap-2{gap:.5rem}.gap-3{gap:.75rem}.gap-4{gap:1rem}.gap-5{gap:1.25rem}.gap-6{gap:1.5rem}.gap-8{gap:2rem}.space-y-3>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(.75rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.75rem*var(--tw-space-y-reverse))}.space-y-4>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(1rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1rem*var(--tw-space-y-reverse))}.space-y-5>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(1.25rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1.25rem*var(--tw-space-y-reverse))}.divide-y>:not([hidden])~:not([hidden]){--tw-divide-y-reverse:0;border-top-width:calc(1px*(1 - var(--tw-divide-y-reverse)));border-bottom-width:calc(1px*var(--tw-divide-y-reverse))}.divide-line>:not([hidden])~:not([hidden]){--tw-divide-opacity:1;border-color:rgb(226 232 240/var(--tw-divide-opacity,1))}.overflow-auto{overflow:auto}.overflow-hidden{overflow:hidden}.overflow-x-auto{overflow-x:auto}.overflow-y-auto{overflow-y:auto}.truncate{overflow:hidden;text-overflow:ellipsis}.truncate,.whitespace-nowrap{white-space:nowrap}.rounded{border-radius:.25rem}.rounded-full{border-radius:9999px}.rounded-lg{border-radius:.5rem}.rounded-md{border-radius:.375rem}.rounded-xl{border-radius:.75rem}.border{border-width:1px}.border-2{border-width:2px}.border-b{border-bottom-width:1px}.border-b-2{border-bottom-width:2px}.border-t{border-top-width:1px}.border-dashed{border-style:dashed}.border-amber-100{--tw-border-opacity:1;border-color:rgb(254 243 199/var(--tw-border-opacity,1))}.border-blue-100{--tw-border-opacity:1;border-color:rgb(219 234 254/var(--tw-border-opacity,1))}.border-blue-200{--tw-border-opacity:1;border-color:rgb(191 219 254/var(--tw-border-opacity,1))}.border-line{--tw-border-opacity:1;border-color:rgb(226 232 240/var(--tw-border-opacity,1))}.border-orange-100{--tw-border-opacity:1;border-color:rgb(255 237 213/var(--tw-border-opacity,1))}.border-outline{--tw-border-opacity:1;border-color:rgb(199 206 216/var(--tw-border-opacity,1))}.border-primary{--tw-border-opacity:1;border-color:rgb(0 94 184/var(--tw-border-opacity,1))}.border-red-100{--tw-border-opacity:1;border-color:rgb(254 226 226/var(--tw-border-opacity,1))}.border-red-200{--tw-border-opacity:1;border-color:rgb(254 202 202/var(--tw-border-opacity,1))}.border-red-300{--tw-border-opacity:1;border-color:rgb(252 165 165/var(--tw-border-opacity,1))}.border-slate-200{--tw-border-opacity:1;border-color:rgb(226 232 240/var(--tw-border-opacity,1))}.border-slate-300{--tw-border-opacity:1;border-color:rgb(203 213 225/var(--tw-border-opacity,1))}.border-transparent{border-color:transparent}.bg-\[\#eceff3\]{--tw-bg-opacity:1;background-color:rgb(236 239 243/var(--tw-bg-opacity,1))}.bg-amber-50{--tw-bg-opacity:1;background-color:rgb(255 251 235/var(--tw-bg-opacity,1))}.bg-blue-50{--tw-bg-opacity:1;background-color:rgb(239 246 255/var(--tw-bg-opacity,1))}.bg-blueSoft{--tw-bg-opacity:1;background-color:rgb(234 243 255/var(--tw-bg-opacity,1))}.bg-dangerSoft{--tw-bg-opacity:1;background-color:rgb(255 240 240/var(--tw-bg-opacity,1))}.bg-orange-50{--tw-bg-opacity:1;background-color:rgb(255 247 237/var(--tw-bg-opacity,1))}.bg-page{--tw-bg-opacity:1;background-color:rgb(243 245 248/var(--tw-bg-opacity,1))}.bg-primary{--tw-bg-opacity:1;background-color:rgb(0 94 184/var(--tw-bg-opacity,1))}.bg-red-50{--tw-bg-opacity:1;background-color:rgb(254 242 242/var(--tw-bg-opacity,1))}.bg-slate-100{--tw-bg-opacity:1;background-color:rgb(241 245 249/var(--tw-bg-opacity,1))}.bg-slate-50{--tw-bg-opacity:1;background-color:rgb(248 250 252/var(--tw-bg-opacity,1))}.bg-white{--tw-bg-opacity:1;background-color:rgb(255 255 255/var(--tw-bg-opacity,1))}.bg-white\/95{background-color:hsla(0,0%,100%,.95)}.object-contain{-o-object-fit:contain;object-fit:contain}.p-10{padding:2.5rem}.p-3{padding:.75rem}.p-3\.5{padding:.875rem}.p-4{padding:1rem}.p-5{padding:1.25rem}.p-6{padding:1.5rem}.px-0{padding-left:0;padding-right:0}.px-16{padding-left:4rem;padding-right:4rem}.px-2{padding-left:.5rem;padding-right:.5rem}.px-3{padding-left:.75rem;padding-right:.75rem}.px-4{padding-left:1rem;padding-right:1rem}.px-5{padding-left:1.25rem;padding-right:1.25rem}.px-7{padding-left:1.75rem;padding-right:1.75rem}.py-1{padding-top:.25rem;padding-bottom:.25rem}.py-12{padding-top:3rem;padding-bottom:3rem}.py-14{padding-top:3.5rem;padding-bottom:3.5rem}.py-2{padding-top:.5rem;padding-bottom:.5rem}.py-3{padding-top:.75rem;padding-bottom:.75rem}.py-3\.5{padding-top:.875rem;padding-bottom:.875rem}.py-4{padding-top:1rem;padding-bottom:1rem}.py-6{padding-top:1.5rem;padding-bottom:1.5rem}.py-8{padding-top:2rem;padding-bottom:2rem}.pl-11{padding-left:2.75rem}.pr-12{padding-right:3rem}.pr-4{padding-right:1rem}.pt-0\.5{padding-top:.125rem}.text-left{text-align:left}.text-center{text-align:center}.text-2xl{font-size:1.5rem;line-height:2rem}.text-3xl{font-size:1.875rem;line-height:2.25rem}.text-4xl{font-size:2.25rem;line-height:2.5rem}.text-5xl{font-size:3rem;line-height:1}.text-\[11px\]{font-size:11px}.text-\[12px\]{font-size:12px}.text-\[13px\]{font-size:13px}.text-\[15px\]{font-size:15px}.text-\[16px\]{font-size:16px}.text-\[18px\]{font-size:18px}.text-\[26px\]{font-size:26px}.text-\[28px\]{font-size:28px}.text-\[32px\]{font-size:32px}.text-\[44px\]{font-size:44px}.text-\[52px\]{font-size:52px}.text-base{font-size:1rem;line-height:1.5rem}.text-lg{font-size:1.125rem;line-height:1.75rem}.text-sm{font-size:.875rem;line-height:1.25rem}.text-xl{font-size:1.25rem;line-height:1.75rem}.text-xs{font-size:.75rem;line-height:1rem}.font-black{font-weight:900}.font-bold{font-weight:700}.font-extrabold{font-weight:800}.font-semibold{font-weight:600}.uppercase{text-transform:uppercase}.italic{font-style:italic}.leading-5{line-height:1.25rem}.leading-6{line-height:1.5rem}.leading-7{line-height:1.75rem}.leading-\[1\.5\]{line-height:1.5}.tracking-\[0\.12em\]{letter-spacing:.12em}.tracking-\[0\.18em\]{letter-spacing:.18em}.tracking-tight{letter-spacing:-.025em}.text-amber-600{--tw-text-opacity:1;color:rgb(217 119 6/var(--tw-text-opacity,1))}.text-blue-600{--tw-text-opacity:1;color:rgb(37 99 235/var(--tw-text-opacity,1))}.text-dangerText{--tw-text-opacity:1;color:rgb(220 38 38/var(--tw-text-opacity,1))}.text-orange-600{--tw-text-opacity:1;color:rgb(234 88 12/var(--tw-text-opacity,1))}.text-primary{--tw-text-opacity:1;color:rgb(0 94 184/var(--tw-text-opacity,1))}.text-slate-400{--tw-text-opacity:1;color:rgb(148 163 184/var(--tw-text-opacity,1))}.text-slate-500{--tw-text-opacity:1;color:rgb(100 116 139/var(--tw-text-opacity,1))}.text-slate-600{--tw-text-opacity:1;color:rgb(71 85 105/var(--tw-text-opacity,1))}.text-successText{--tw-text-opacity:1;color:rgb(22 163 74/var(--tw-text-opacity,1))}.text-textMain{--tw-text-opacity:1;color:rgb(15 23 42/var(--tw-text-opacity,1))}.text-textSub{--tw-text-opacity:1;color:rgb(100 116 139/var(--tw-text-opacity,1))}.text-white{--tw-text-opacity:1;color:rgb(255 255 255/var(--tw-text-opacity,1))}.text-white\/50{color:hsla(0,0%,100%,.5)}.text-white\/75{color:hsla(0,0%,100%,.75)}.antialiased{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.opacity-0{opacity:0}.opacity-100{opacity:1}.opacity-50{opacity:.5}.shadow-\[0_18px_45px_rgba\(15\2c 23\2c 42\2c \.16\)\]{--tw-shadow:0 18px 45px rgba(15,23,42,.16);--tw-shadow-colored:0 18px 45px var(--tw-shadow-color)}.shadow-\[0_18px_45px_rgba\(15\2c 23\2c 42\2c \.16\)\],.shadow-panel{box-shadow:var(--tw-ring-offset-shadow,0 0 #0000),var(--tw-ring-shadow,0 0 #0000),var(--tw-shadow)}.shadow-panel{--tw-shadow:0 1px 2px rgba(15,23,42,.04);--tw-shadow-colored:0 1px 2px var(--tw-shadow-color)}.outline{outline-style:solid}.ring-4{--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(4px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow,0 0 #0000)}.ring-red-100{--tw-ring-opacity:1;--tw-ring-color:rgb(254 226 226/var(--tw-ring-opacity,1))}.backdrop-blur{--tw-backdrop-blur:blur(8px);-webkit-backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia);backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia)}.transition{transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,-webkit-backdrop-filter;transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter;transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter,-webkit-backdrop-filter;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.transition-all{transition-property:all;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.duration-200{transition-duration:.2s}.ease-out{transition-timing-function:cubic-bezier(0,0,.2,1)}@keyframes spin{to{transform:rotate(1turn)}}.hover\:border-primary:hover{--tw-border-opacity:1;border-color:rgb(0 94 184/var(--tw-border-opacity,1))}.hover\:bg-blue-50\/50:hover{background-color:rgba(239,246,255,.5)}.hover\:bg-slate-100:hover{--tw-bg-opacity:1;background-color:rgb(241 245 249/var(--tw-bg-opacity,1))}.hover\:bg-slate-50:hover{--tw-bg-opacity:1;background-color:rgb(248 250 252/var(--tw-bg-opacity,1))}.hover\:text-primary:hover{--tw-text-opacity:1;color:rgb(0 94 184/var(--tw-text-opacity,1))}.hover\:text-primaryDeep:hover{--tw-text-opacity:1;color:rgb(12 65 136/var(--tw-text-opacity,1))}.hover\:text-slate-700:hover{--tw-text-opacity:1;color:rgb(51 65 85/var(--tw-text-opacity,1))}.focus\:border-primary:focus{--tw-border-opacity:1;border-color:rgb(0 94 184/var(--tw-border-opacity,1))}.focus\:ring-0:focus{--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow,0 0 #0000)}.focus\:ring-primary:focus{--tw-ring-opacity:1;--tw-ring-color:rgb(0 94 184/var(--tw-ring-opacity,1))}.disabled\:cursor-not-allowed:disabled{cursor:not-allowed}.disabled\:bg-slate-100:disabled{--tw-bg-opacity:1;background-color:rgb(241 245 249/var(--tw-bg-opacity,1))}.disabled\:text-slate-400:disabled{--tw-text-opacity:1;color:rgb(148 163 184/var(--tw-text-opacity,1))}@media (min-width:640px){.sm\:left-12{left:3rem}.sm\:right-12{right:3rem}.sm\:top-24{top:6rem}.sm\:inline{display:inline}.sm\:flex{display:flex}.sm\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.sm\:flex-row{flex-direction:row}.sm\:items-start{align-items:flex-start}.sm\:items-center{align-items:center}.sm\:justify-between{justify-content:space-between}.sm\:p-6{padding:1.5rem}.sm\:px-12{padding-left:3rem;padding-right:3rem}.sm\:px-6{padding-left:1.5rem;padding-right:1.5rem}.sm\:text-4xl{font-size:2.25rem;line-height:2.5rem}}@media (min-width:768px){.md\:flex{display:flex}.md\:hidden{display:none}.md\:w-auto{width:auto}.md\:grid-cols-\[minmax\(0\2c 1fr\)_auto\]{grid-template-columns:minmax(0,1fr) auto}.md\:flex-nowrap{flex-wrap:nowrap}.md\:items-center{align-items:center}.md\:px-14{padding-left:3.5rem;padding-right:3.5rem}}@media (min-width:1024px){.lg\:col-start-1{grid-column-start:1}.lg\:col-start-2{grid-column-start:2}.lg\:row-start-1{grid-row-start:1}.lg\:row-start-2{grid-row-start:2}.lg\:flex{display:flex}.lg\:hidden{display:none}.lg\:grid-cols-\[1\.4fr_1fr\]{grid-template-columns:1.4fr 1fr}.lg\:grid-cols-\[minmax\(0\2c 1fr\)_360px\]{grid-template-columns:minmax(0,1fr) 360px}.lg\:flex-row{flex-direction:row}.lg\:items-end{align-items:flex-end}.lg\:justify-between{justify-content:space-between}.lg\:px-8{padding-left:2rem;padding-right:2rem}.lg\:py-8{padding-top:2rem;padding-bottom:2rem}.lg\:text-\[40px\]{font-size:40px}}@media (min-width:1280px){.xl\:left-auto{left:auto}.xl\:right-auto{right:auto}.xl\:w-\[320px\]{width:320px}} \ No newline at end of file +/*! tailwindcss v3.4.19 | MIT License | https://tailwindcss.com*/*,:after,:before{box-sizing:border-box;border:0 solid #e5e7eb}:after,:before{--tw-content:""}:host,html{line-height:1.5;-webkit-text-size-adjust:100%;-moz-tab-size:4;-o-tab-size:4;tab-size:4;font-family:ui-sans-serif,system-ui,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji;font-feature-settings:normal;font-variation-settings:normal;-webkit-tap-highlight-color:transparent}body{margin:0;line-height:inherit}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,pre,samp{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace;font-feature-settings:normal;font-variation-settings:normal;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}button,input,optgroup,select,textarea{font-family:inherit;font-feature-settings:inherit;font-variation-settings:inherit;font-size:100%;font-weight:inherit;line-height:inherit;letter-spacing:inherit;color:inherit;margin:0;padding:0}button,select{text-transform:none}button,input:where([type=button]),input:where([type=reset]),input:where([type=submit]){-webkit-appearance:button;background-color:transparent;background-image:none}:-moz-focusring{outline:auto}:-moz-ui-invalid{box-shadow:none}progress{vertical-align:baseline}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}summary{display:list-item}blockquote,dd,dl,figure,h1,h2,h3,h4,h5,h6,hr,p,pre{margin:0}fieldset{margin:0}fieldset,legend{padding:0}menu,ol,ul{list-style:none;margin:0;padding:0}dialog{padding:0}textarea{resize:vertical}input::-moz-placeholder,textarea::-moz-placeholder{opacity:1;color:#9ca3af}input::placeholder,textarea::placeholder{opacity:1;color:#9ca3af}[role=button],button{cursor:pointer}:disabled{cursor:default}audio,canvas,embed,iframe,img,object,svg,video{display:block;vertical-align:middle}img,video{max-width:100%;height:auto}[hidden]:where(:not([hidden=until-found])){display:none}input:where(:not([type])),input:where([type=date]),input:where([type=datetime-local]),input:where([type=email]),input:where([type=month]),input:where([type=number]),input:where([type=password]),input:where([type=search]),input:where([type=tel]),input:where([type=text]),input:where([type=time]),input:where([type=url]),input:where([type=week]),select,select:where([multiple]),textarea{-webkit-appearance:none;-moz-appearance:none;appearance:none;background-color:#fff;border-color:#6b7280;border-width:1px;border-radius:0;padding:.5rem .75rem;font-size:1rem;line-height:1.5rem;--tw-shadow:0 0 #0000}input:where(:not([type])):focus,input:where([type=date]):focus,input:where([type=datetime-local]):focus,input:where([type=email]):focus,input:where([type=month]):focus,input:where([type=number]):focus,input:where([type=password]):focus,input:where([type=search]):focus,input:where([type=tel]):focus,input:where([type=text]):focus,input:where([type=time]):focus,input:where([type=url]):focus,input:where([type=week]):focus,select:focus,select:where([multiple]):focus,textarea:focus{outline:2px solid transparent;outline-offset:2px;--tw-ring-inset:var(--tw-empty,/*!*/ /*!*/);--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:#2563eb;--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(1px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow);border-color:#2563eb}input::-moz-placeholder,textarea::-moz-placeholder{color:#6b7280;opacity:1}input::placeholder,textarea::placeholder{color:#6b7280;opacity:1}::-webkit-datetime-edit-fields-wrapper{padding:0}::-webkit-date-and-time-value{min-height:1.5em;text-align:inherit}::-webkit-datetime-edit{display:inline-flex}::-webkit-datetime-edit,::-webkit-datetime-edit-day-field,::-webkit-datetime-edit-hour-field,::-webkit-datetime-edit-meridiem-field,::-webkit-datetime-edit-millisecond-field,::-webkit-datetime-edit-minute-field,::-webkit-datetime-edit-month-field,::-webkit-datetime-edit-second-field,::-webkit-datetime-edit-year-field{padding-top:0;padding-bottom:0}select{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='none' viewBox='0 0 20 20'%3E%3Cpath stroke='%236b7280' stroke-linecap='round' stroke-linejoin='round' stroke-width='1.5' d='m6 8 4 4 4-4'/%3E%3C/svg%3E");background-position:right .5rem center;background-repeat:no-repeat;background-size:1.5em 1.5em;padding-right:2.5rem;-webkit-print-color-adjust:exact;print-color-adjust:exact}select:where([multiple]),select:where([size]:not([size="1"])){background-image:none;background-position:0 0;background-repeat:unset;background-size:initial;padding-right:.75rem;-webkit-print-color-adjust:unset;print-color-adjust:unset}input:where([type=checkbox]),input:where([type=radio]){-webkit-appearance:none;-moz-appearance:none;appearance:none;padding:0;-webkit-print-color-adjust:exact;print-color-adjust:exact;display:inline-block;vertical-align:middle;background-origin:border-box;-webkit-user-select:none;-moz-user-select:none;user-select:none;flex-shrink:0;height:1rem;width:1rem;color:#2563eb;background-color:#fff;border-color:#6b7280;border-width:1px;--tw-shadow:0 0 #0000}input:where([type=checkbox]){border-radius:0}input:where([type=radio]){border-radius:100%}input:where([type=checkbox]):focus,input:where([type=radio]):focus{outline:2px solid transparent;outline-offset:2px;--tw-ring-inset:var(--tw-empty,/*!*/ /*!*/);--tw-ring-offset-width:2px;--tw-ring-offset-color:#fff;--tw-ring-color:#2563eb;--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(2px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow)}input:where([type=checkbox]):checked,input:where([type=radio]):checked{border-color:transparent;background-color:currentColor;background-size:100% 100%;background-position:50%;background-repeat:no-repeat}input:where([type=checkbox]):checked{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' viewBox='0 0 16 16'%3E%3Cpath d='M12.207 4.793a1 1 0 0 1 0 1.414l-5 5a1 1 0 0 1-1.414 0l-2-2a1 1 0 0 1 1.414-1.414L6.5 9.086l4.293-4.293a1 1 0 0 1 1.414 0'/%3E%3C/svg%3E")}@media (forced-colors:active) {input:where([type=checkbox]):checked{-webkit-appearance:auto;-moz-appearance:auto;appearance:auto}}input:where([type=radio]):checked{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' viewBox='0 0 16 16'%3E%3Ccircle cx='8' cy='8' r='3'/%3E%3C/svg%3E")}@media (forced-colors:active) {input:where([type=radio]):checked{-webkit-appearance:auto;-moz-appearance:auto;appearance:auto}}input:where([type=checkbox]):checked:focus,input:where([type=checkbox]):checked:hover,input:where([type=radio]):checked:focus,input:where([type=radio]):checked:hover{border-color:transparent;background-color:currentColor}input:where([type=checkbox]):indeterminate{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='none' viewBox='0 0 16 16'%3E%3Cpath stroke='%23fff' stroke-linecap='round' stroke-linejoin='round' stroke-width='2' d='M4 8h8'/%3E%3C/svg%3E");border-color:transparent;background-color:currentColor;background-size:100% 100%;background-position:50%;background-repeat:no-repeat}@media (forced-colors:active) {input:where([type=checkbox]):indeterminate{-webkit-appearance:auto;-moz-appearance:auto;appearance:auto}}input:where([type=checkbox]):indeterminate:focus,input:where([type=checkbox]):indeterminate:hover{border-color:transparent;background-color:currentColor}input:where([type=file]){background:unset;border-color:inherit;border-width:0;border-radius:0;padding:0;font-size:unset;line-height:inherit}input:where([type=file]):focus{outline:1px solid ButtonText;outline:1px auto -webkit-focus-ring-color}body,h1,h2,h3,h4{font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif}.material-symbols-outlined{font-family:Material Symbols Outlined;font-weight:400;font-style:normal;font-size:24px;letter-spacing:normal;text-transform:none;width:1em;height:1em;min-width:1em;flex:0 0 auto;overflow:hidden;word-wrap:normal;direction:ltr;vertical-align:middle;font-variation-settings:"FILL" 0,"wght" 400,"GRAD" 0,"opsz" 24}.material-symbols-outlined,.ui-btn{line-height:1;display:inline-flex;align-items:center;justify-content:center;white-space:nowrap}.ui-btn{box-sizing:border-box;min-height:44px;height:44px;gap:.5rem;border-radius:.375rem;border:1px solid transparent;padding:0 1rem;font-size:.875rem;font-weight:700;transition:background-color .15s ease,border-color .15s ease,color .15s ease,box-shadow .15s ease}.ui-btn-lg{min-height:52px;height:52px;font-size:.875rem}.ui-btn-sm{min-height:40px;height:40px;padding:0 .75rem}.ui-btn-compact{min-height:34px;height:34px;padding:0 .65rem;gap:.35rem;font-size:.8125rem}.ui-btn-field{min-height:50px;height:50px}.ui-btn-primary{background:#005eb8;color:#fff;box-shadow:0 18px 34px rgba(15,23,42,.06)}.ui-btn-primary:hover{background:#0c4188}.ui-btn-secondary{border-color:#e2e8f0;background:#fff;color:#334155;box-shadow:0 1px 2px rgba(15,23,42,.04)}.ui-btn-secondary:hover{border-color:#005eb8;color:#005eb8}.ui-btn:disabled,.ui-btn[aria-disabled=true]{cursor:not-allowed;box-shadow:none;opacity:.7}.ui-btn[aria-busy=true]{pointer-events:none}.ui-btn-primary:disabled{background:#cbd5e1}.ui-btn .material-symbols-outlined,.ui-btn-icon{width:20px;height:20px;flex:0 0 20px;font-size:20px}.ui-icon-btn{display:inline-flex;width:28px;height:28px;flex:0 0 28px;justify-content:center;transition:background-color .15s ease,color .15s ease}.ui-action-row,.ui-icon-btn{box-sizing:border-box;align-items:center;border-radius:.375rem;line-height:1}.ui-action-row{display:flex;min-height:44px;justify-content:space-between;gap:.75rem;border:1px solid #e2e8f0;padding:0 .75rem;font-size:.875rem;font-weight:700;transition:border-color .15s ease,color .15s ease}.ui-action-row:hover{border-color:#005eb8;color:#005eb8}.spinner{display:inline-flex;width:20px;height:20px;flex:0 0 20px;border-radius:9999px;border:2px solid hsla(0,0%,100%,.35);border-top-color:#fff;animation:spin .75s linear infinite}.ui-btn-secondary .spinner{border-color:#005eb8 rgba(0,94,184,.22) rgba(0,94,184,.22)}.sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border-width:0}.pointer-events-none{pointer-events:none}.static{position:static}.fixed{position:fixed}.absolute{position:absolute}.relative{position:relative}.sticky{position:sticky}.left-1\/2{left:50%}.left-4{left:1rem}.left-7{left:1.75rem}.right-7{right:1.75rem}.top-0{top:0}.top-1\/2{top:50%}.top-20{top:5rem}.top-6{top:1.5rem}.z-30{z-index:30}.z-50{z-index:50}.order-1{order:1}.order-2{order:2}.order-3{order:3}.order-4{order:4}.float-right{float:right}.mx-6{margin-left:1.5rem;margin-right:1.5rem}.mx-auto{margin-left:auto;margin-right:auto}.-mr-1{margin-right:-.25rem}.-mt-1{margin-top:-.25rem}.mb-10{margin-bottom:2.5rem}.mb-2{margin-bottom:.5rem}.mb-3{margin-bottom:.75rem}.mb-4{margin-bottom:1rem}.mb-5{margin-bottom:1.25rem}.mb-6{margin-bottom:1.5rem}.mb-7{margin-bottom:1.75rem}.mb-8{margin-bottom:2rem}.mt-0\.5{margin-top:.125rem}.mt-1{margin-top:.25rem}.mt-2{margin-top:.5rem}.mt-3{margin-top:.75rem}.mt-4{margin-top:1rem}.mt-5{margin-top:1.25rem}.mt-6{margin-top:1.5rem}.mt-7{margin-top:1.75rem}.block{display:block}.flex{display:flex}.inline-flex{display:inline-flex}.table{display:table}.grid{display:grid}.hidden{display:none}.h-10{height:2.5rem}.h-12{height:3rem}.h-14{height:3.5rem}.h-16{height:4rem}.h-8{height:2rem}.h-9{height:2.25rem}.h-\[460px\]{height:460px}.h-\[50px\]{height:50px}.h-\[520px\]{height:520px}.h-\[900px\]{height:900px}.h-\[calc\(100vh-230px\)\]{height:calc(100vh - 230px)}.h-full{height:100%}.h-px{height:1px}.max-h-full{max-height:100%}.min-h-0{min-height:0}.min-h-\[360px\]{min-height:360px}.min-h-\[520px\]{min-height:520px}.min-h-\[560px\]{min-height:560px}.min-h-\[620px\]{min-height:620px}.min-h-\[76px\]{min-height:76px}.min-h-screen{min-height:100vh}.w-14{width:3.5rem}.w-8{width:2rem}.w-9{width:2.25rem}.w-\[calc\(100vw-2rem\)\]{width:calc(100vw - 2rem)}.w-fit{width:-moz-fit-content;width:fit-content}.w-full{width:100%}.w-px{width:1px}.min-w-0{min-width:0}.min-w-10{min-width:2.5rem}.min-w-\[150px\]{min-width:150px}.min-w-full{min-width:100%}.max-w-3xl{max-width:48rem}.max-w-7xl{max-width:80rem}.max-w-\[120px\]{max-width:120px}.max-w-\[360px\]{max-width:360px}.max-w-\[430px\]{max-width:430px}.max-w-\[440px\]{max-width:440px}.max-w-md{max-width:28rem}.flex-1{flex:1 1 0%}.shrink-0{flex-shrink:0}.-translate-x-1\/2{--tw-translate-x:-50%}.-translate-x-1\/2,.-translate-y-1\/2{transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.-translate-y-1\/2{--tw-translate-y:-50%}.translate-y-0{--tw-translate-y:0px}.translate-y-0,.translate-y-3{transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.translate-y-3{--tw-translate-y:0.75rem}.transform{transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.cursor-pointer{cursor:pointer}.resize{resize:both}.grid-cols-1{grid-template-columns:repeat(1,minmax(0,1fr))}.grid-cols-6{grid-template-columns:repeat(6,minmax(0,1fr))}.grid-cols-\[1fr_92px_44px\]{grid-template-columns:1fr 92px 44px}.flex-col{flex-direction:column}.flex-wrap{flex-wrap:wrap}.items-start{align-items:flex-start}.items-center{align-items:center}.items-stretch{align-items:stretch}.justify-center{justify-content:center}.justify-between{justify-content:space-between}.gap-1{gap:.25rem}.gap-2{gap:.5rem}.gap-3{gap:.75rem}.gap-4{gap:1rem}.gap-5{gap:1.25rem}.gap-6{gap:1.5rem}.gap-8{gap:2rem}.space-y-3>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(.75rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.75rem*var(--tw-space-y-reverse))}.space-y-4>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(1rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1rem*var(--tw-space-y-reverse))}.space-y-5>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(1.25rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1.25rem*var(--tw-space-y-reverse))}.divide-y>:not([hidden])~:not([hidden]){--tw-divide-y-reverse:0;border-top-width:calc(1px*(1 - var(--tw-divide-y-reverse)));border-bottom-width:calc(1px*var(--tw-divide-y-reverse))}.divide-line>:not([hidden])~:not([hidden]){--tw-divide-opacity:1;border-color:rgb(226 232 240/var(--tw-divide-opacity,1))}.overflow-hidden{overflow:hidden}.overflow-x-auto{overflow-x:auto}.overflow-y-auto{overflow-y:auto}.truncate{overflow:hidden;text-overflow:ellipsis}.truncate,.whitespace-nowrap{white-space:nowrap}.rounded{border-radius:.25rem}.rounded-2xl{border-radius:1rem}.rounded-full{border-radius:9999px}.rounded-lg{border-radius:.5rem}.rounded-md{border-radius:.375rem}.rounded-xl{border-radius:.75rem}.border{border-width:1px}.border-2{border-width:2px}.border-b{border-bottom-width:1px}.border-b-2{border-bottom-width:2px}.border-t{border-top-width:1px}.border-dashed{border-style:dashed}.border-amber-100{--tw-border-opacity:1;border-color:rgb(254 243 199/var(--tw-border-opacity,1))}.border-blue-100{--tw-border-opacity:1;border-color:rgb(219 234 254/var(--tw-border-opacity,1))}.border-blue-200{--tw-border-opacity:1;border-color:rgb(191 219 254/var(--tw-border-opacity,1))}.border-line{--tw-border-opacity:1;border-color:rgb(226 232 240/var(--tw-border-opacity,1))}.border-orange-100{--tw-border-opacity:1;border-color:rgb(255 237 213/var(--tw-border-opacity,1))}.border-outline{--tw-border-opacity:1;border-color:rgb(199 206 216/var(--tw-border-opacity,1))}.border-primary{--tw-border-opacity:1;border-color:rgb(0 94 184/var(--tw-border-opacity,1))}.border-red-100{--tw-border-opacity:1;border-color:rgb(254 226 226/var(--tw-border-opacity,1))}.border-red-200{--tw-border-opacity:1;border-color:rgb(254 202 202/var(--tw-border-opacity,1))}.border-red-300{--tw-border-opacity:1;border-color:rgb(252 165 165/var(--tw-border-opacity,1))}.border-slate-200{--tw-border-opacity:1;border-color:rgb(226 232 240/var(--tw-border-opacity,1))}.border-slate-300{--tw-border-opacity:1;border-color:rgb(203 213 225/var(--tw-border-opacity,1))}.border-transparent{border-color:transparent}.bg-\[\#eceff3\]{--tw-bg-opacity:1;background-color:rgb(236 239 243/var(--tw-bg-opacity,1))}.bg-amber-50{--tw-bg-opacity:1;background-color:rgb(255 251 235/var(--tw-bg-opacity,1))}.bg-blue-50{--tw-bg-opacity:1;background-color:rgb(239 246 255/var(--tw-bg-opacity,1))}.bg-blueSoft{--tw-bg-opacity:1;background-color:rgb(234 243 255/var(--tw-bg-opacity,1))}.bg-dangerSoft{--tw-bg-opacity:1;background-color:rgb(255 240 240/var(--tw-bg-opacity,1))}.bg-orange-50{--tw-bg-opacity:1;background-color:rgb(255 247 237/var(--tw-bg-opacity,1))}.bg-page{--tw-bg-opacity:1;background-color:rgb(243 245 248/var(--tw-bg-opacity,1))}.bg-primary{--tw-bg-opacity:1;background-color:rgb(0 94 184/var(--tw-bg-opacity,1))}.bg-red-50{--tw-bg-opacity:1;background-color:rgb(254 242 242/var(--tw-bg-opacity,1))}.bg-slate-100{--tw-bg-opacity:1;background-color:rgb(241 245 249/var(--tw-bg-opacity,1))}.bg-slate-50{--tw-bg-opacity:1;background-color:rgb(248 250 252/var(--tw-bg-opacity,1))}.bg-white{--tw-bg-opacity:1;background-color:rgb(255 255 255/var(--tw-bg-opacity,1))}.bg-white\/95{background-color:hsla(0,0%,100%,.95)}.object-contain{-o-object-fit:contain;object-fit:contain}.p-10{padding:2.5rem}.p-2{padding:.5rem}.p-3{padding:.75rem}.p-3\.5{padding:.875rem}.p-4{padding:1rem}.p-5{padding:1.25rem}.p-6{padding:1.5rem}.p-7{padding:1.75rem}.px-0{padding-left:0;padding-right:0}.px-16{padding-left:4rem;padding-right:4rem}.px-2{padding-left:.5rem;padding-right:.5rem}.px-3{padding-left:.75rem;padding-right:.75rem}.px-4{padding-left:1rem;padding-right:1rem}.px-5{padding-left:1.25rem;padding-right:1.25rem}.px-6{padding-left:1.5rem;padding-right:1.5rem}.px-7{padding-left:1.75rem;padding-right:1.75rem}.py-1{padding-top:.25rem;padding-bottom:.25rem}.py-12{padding-top:3rem;padding-bottom:3rem}.py-14{padding-top:3.5rem;padding-bottom:3.5rem}.py-2{padding-top:.5rem;padding-bottom:.5rem}.py-3{padding-top:.75rem;padding-bottom:.75rem}.py-3\.5{padding-top:.875rem;padding-bottom:.875rem}.py-4{padding-top:1rem;padding-bottom:1rem}.py-6{padding-top:1.5rem;padding-bottom:1.5rem}.py-7{padding-top:1.75rem;padding-bottom:1.75rem}.py-8{padding-top:2rem;padding-bottom:2rem}.pl-11{padding-left:2.75rem}.pr-12{padding-right:3rem}.pr-4{padding-right:1rem}.pt-0\.5{padding-top:.125rem}.text-left{text-align:left}.text-center{text-align:center}.text-2xl{font-size:1.5rem;line-height:2rem}.text-3xl{font-size:1.875rem;line-height:2.25rem}.text-4xl{font-size:2.25rem;line-height:2.5rem}.text-5xl{font-size:3rem;line-height:1}.text-\[11px\]{font-size:11px}.text-\[12px\]{font-size:12px}.text-\[13px\]{font-size:13px}.text-\[15px\]{font-size:15px}.text-\[16px\]{font-size:16px}.text-\[18px\]{font-size:18px}.text-\[26px\]{font-size:26px}.text-\[28px\]{font-size:28px}.text-\[32px\]{font-size:32px}.text-\[44px\]{font-size:44px}.text-\[52px\]{font-size:52px}.text-base{font-size:1rem;line-height:1.5rem}.text-lg{font-size:1.125rem;line-height:1.75rem}.text-sm{font-size:.875rem;line-height:1.25rem}.text-xl{font-size:1.25rem;line-height:1.75rem}.text-xs{font-size:.75rem;line-height:1rem}.font-black{font-weight:900}.font-bold{font-weight:700}.font-extrabold{font-weight:800}.font-semibold{font-weight:600}.uppercase{text-transform:uppercase}.italic{font-style:italic}.leading-5{line-height:1.25rem}.leading-6{line-height:1.5rem}.leading-7{line-height:1.75rem}.leading-\[1\.5\]{line-height:1.5}.tracking-\[0\.18em\]{letter-spacing:.18em}.tracking-tight{letter-spacing:-.025em}.tracking-wide{letter-spacing:.025em}.tracking-widest{letter-spacing:.1em}.text-amber-600{--tw-text-opacity:1;color:rgb(217 119 6/var(--tw-text-opacity,1))}.text-blue-600{--tw-text-opacity:1;color:rgb(37 99 235/var(--tw-text-opacity,1))}.text-dangerText{--tw-text-opacity:1;color:rgb(220 38 38/var(--tw-text-opacity,1))}.text-orange-600{--tw-text-opacity:1;color:rgb(234 88 12/var(--tw-text-opacity,1))}.text-primary{--tw-text-opacity:1;color:rgb(0 94 184/var(--tw-text-opacity,1))}.text-slate-400{--tw-text-opacity:1;color:rgb(148 163 184/var(--tw-text-opacity,1))}.text-slate-500{--tw-text-opacity:1;color:rgb(100 116 139/var(--tw-text-opacity,1))}.text-slate-600{--tw-text-opacity:1;color:rgb(71 85 105/var(--tw-text-opacity,1))}.text-textMain{--tw-text-opacity:1;color:rgb(15 23 42/var(--tw-text-opacity,1))}.text-textSub{--tw-text-opacity:1;color:rgb(100 116 139/var(--tw-text-opacity,1))}.text-white{--tw-text-opacity:1;color:rgb(255 255 255/var(--tw-text-opacity,1))}.text-white\/50{color:hsla(0,0%,100%,.5)}.text-white\/75{color:hsla(0,0%,100%,.75)}.antialiased{-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.opacity-0{opacity:0}.opacity-100{opacity:1}.opacity-50{opacity:.5}.shadow-\[0_18px_45px_rgba\(15\2c 23\2c 42\2c \.16\)\]{--tw-shadow:0 18px 45px rgba(15,23,42,.16);--tw-shadow-colored:0 18px 45px var(--tw-shadow-color)}.shadow-\[0_18px_45px_rgba\(15\2c 23\2c 42\2c \.16\)\],.shadow-panel{box-shadow:var(--tw-ring-offset-shadow,0 0 #0000),var(--tw-ring-shadow,0 0 #0000),var(--tw-shadow)}.shadow-panel{--tw-shadow:0 1px 2px rgba(15,23,42,.04);--tw-shadow-colored:0 1px 2px var(--tw-shadow-color)}.outline{outline-style:solid}.ring-4{--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(4px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow,0 0 #0000)}.ring-red-100{--tw-ring-opacity:1;--tw-ring-color:rgb(254 226 226/var(--tw-ring-opacity,1))}.backdrop-blur{--tw-backdrop-blur:blur(8px);-webkit-backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia);backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia)}.transition{transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,-webkit-backdrop-filter;transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter;transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter,-webkit-backdrop-filter;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.transition-all{transition-property:all;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.duration-200{transition-duration:.2s}.ease-out{transition-timing-function:cubic-bezier(0,0,.2,1)}@keyframes spin{to{transform:rotate(1turn)}}.hover\:border-primary:hover{--tw-border-opacity:1;border-color:rgb(0 94 184/var(--tw-border-opacity,1))}.hover\:bg-blue-50\/50:hover{background-color:rgba(239,246,255,.5)}.hover\:bg-slate-100:hover{--tw-bg-opacity:1;background-color:rgb(241 245 249/var(--tw-bg-opacity,1))}.hover\:text-primary:hover{--tw-text-opacity:1;color:rgb(0 94 184/var(--tw-text-opacity,1))}.hover\:text-primaryDeep:hover{--tw-text-opacity:1;color:rgb(12 65 136/var(--tw-text-opacity,1))}.hover\:text-slate-700:hover{--tw-text-opacity:1;color:rgb(51 65 85/var(--tw-text-opacity,1))}.focus\:border-primary:focus{--tw-border-opacity:1;border-color:rgb(0 94 184/var(--tw-border-opacity,1))}.focus\:ring-0:focus{--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow,0 0 #0000)}.focus\:ring-primary:focus{--tw-ring-opacity:1;--tw-ring-color:rgb(0 94 184/var(--tw-ring-opacity,1))}.disabled\:cursor-not-allowed:disabled{cursor:not-allowed}.disabled\:bg-slate-100:disabled{--tw-bg-opacity:1;background-color:rgb(241 245 249/var(--tw-bg-opacity,1))}.disabled\:text-slate-400:disabled{--tw-text-opacity:1;color:rgb(148 163 184/var(--tw-text-opacity,1))}@media (min-width:640px){.sm\:left-12{left:3rem}.sm\:right-12{right:3rem}.sm\:top-24{top:6rem}.sm\:col-span-2{grid-column:span 2/span 2}.sm\:mx-8{margin-left:2rem;margin-right:2rem}.sm\:inline{display:inline}.sm\:flex{display:flex}.sm\:w-fit{width:-moz-fit-content;width:fit-content}.sm\:max-w-sm{max-width:24rem}.sm\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.sm\:flex-row{flex-direction:row}.sm\:items-start{align-items:flex-start}.sm\:items-center{align-items:center}.sm\:justify-between{justify-content:space-between}.sm\:p-6{padding:1.5rem}.sm\:px-12{padding-left:3rem;padding-right:3rem}.sm\:px-6{padding-left:1.5rem;padding-right:1.5rem}.sm\:px-8{padding-left:2rem;padding-right:2rem}.sm\:text-4xl{font-size:2.25rem;line-height:2.5rem}}@media (min-width:768px){.md\:flex{display:flex}.md\:hidden{display:none}.md\:w-auto{width:auto}.md\:grid-cols-\[minmax\(0\2c 1fr\)_auto\]{grid-template-columns:minmax(0,1fr) auto}.md\:flex-nowrap{flex-wrap:nowrap}.md\:items-center{align-items:center}.md\:px-14{padding-left:3.5rem;padding-right:3.5rem}}@media (min-width:1024px){.lg\:col-start-1{grid-column-start:1}.lg\:col-start-2{grid-column-start:2}.lg\:row-start-1{grid-row-start:1}.lg\:row-start-2{grid-row-start:2}.lg\:flex{display:flex}.lg\:hidden{display:none}.lg\:grid-cols-\[1\.4fr_1fr\]{grid-template-columns:1.4fr 1fr}.lg\:grid-cols-\[minmax\(0\2c 1fr\)_360px\]{grid-template-columns:minmax(0,1fr) 360px}.lg\:flex-row{flex-direction:row}.lg\:items-end{align-items:flex-end}.lg\:justify-between{justify-content:space-between}.lg\:px-8{padding-left:2rem;padding-right:2rem}.lg\:py-8{padding-top:2rem;padding-bottom:2rem}.lg\:text-\[40px\]{font-size:40px}}@media (min-width:1280px){.xl\:left-auto{left:auto}.xl\:right-auto{right:auto}.xl\:w-\[320px\]{width:320px}} \ No newline at end of file diff --git a/templates/account_security.html b/templates/account_security.html index 30a8051..7867253 100644 --- a/templates/account_security.html +++ b/templates/account_security.html @@ -1,12 +1,78 @@ {% extends "base.html" %} + +{% set active_page = "security" %} +{% block title %}账户安全 | 供水管道健康评估系统{% endblock %} + {% block content %} -
-

账户安全

-

登录邮箱：{{ current_user.email }}

- {% with messages=get_flashed_messages(with_categories=true) %}{% for c,m in messages %}

{{ m }}

{% endfor %}{% endwith %} -
-
-
- {% if session.get('password_change_verified') %}
{% endif %} +
+
+

账户安全

+

登录邮箱：{{ current_user.email }}

+
+ + {% with messages = get_flashed_messages(with_categories=true) %} + {% for category, message in messages %} +

{{ message }}

+ {% endfor %} + {% endwith %} + +
+
+
+ password +
+

修改密码

+

需验证当前密码，并向登录邮箱发送验证码。新密码须包含大小写字母、数字和特殊字符。

+
+
+ {% if password_change_authorized %} +
+ + + + +
+ {% else %} +
+ + + +
+ {% endif %} +
+ +
+
+ alternate_email +
+

更换登录邮箱

+

需验证当前密码、原邮箱和新邮箱。完成后将退出所有设备，并用新邮箱登录。

+
+
+
+ + + + + +
+
+ +
+
+ devices +
+

受信设备

+

需输入当前密码确认。撤销后，所有设备下次登录都需要重新完成邮箱二次认证。

+
+
+
+ + + + +
+
+
{% endblock %} diff --git a/templates/base.html b/templates/base.html index ff7c63d..8f97c38 100644 --- a/templates/base.html +++ b/templates/base.html @@ -20,7 +20,7 @@ 结果 历史 文档 - 安全 + 安全 {% if current_user.is_admin %} 管理 {% endif %} @@ -43,6 +43,7 @@ 结果 历史 文档 + 安全 {% if current_user.is_admin %} 管理 {% endif %} diff --git a/templates/login.html b/templates/login.html index fbda2e5..92cc16f 100644 --- a/templates/login.html +++ b/templates/login.html @@ -1,18 +1,462 @@ - + - {{ '注册' if mode == 'register' else '登录' }} | 供水管道健康评估系统 - + + + + - -
-
-
water_drop

供水管道健康评估系统

{{ '使用邮箱创建账号' if mode == 'register' else '使用邮箱安全登录' }}

- {% with messages = get_flashed_messages(with_categories=true) %}{% for category, message in messages %}

{{ message }}

{% endfor %}{% endwith %} - - {% if mode == 'login' %}{% include "_login_form.html" %}{% else %}{% include "_register_form.html" %}{% endif %} + + {% set page_notice = "当前未开放自助注册。系统仅支持管理员分配账号，请联系管理员完成账号开通后再登录。" if mode == 'register' and not allow_registration else none %} + {% with flashed_messages = get_flashed_messages(with_categories=true) %} + + + {% endwith %} + +
+ -
+ +
+
+
+ +
+ water_drop + 供水管道健康评估系统 +
+

系统门户

+ +
+ 登录 + 注册 +
+ + {% if mode == 'login' %} +
+ +
+ +
+ mail + +
+
+ +
+
+ + 找回密码 +
+
+ lock + + +
+
+ +
+ +
+
+ verified_user + +
+
{{ captcha }}
+ + refresh + +
+
+ + + + +
+ {% else %} +
+ +
+ +
+ badge + +
+
+
+ +
+ mail + +
+
+
+ +
+ lock + + +
+
+
+ +
+
+ verified_user + +
+
{{ captcha }}
+ + refresh + +
+
+ +
+ {% endif %} +
+
+ +
+ + diff --git a/templates/set_password.html b/templates/set_password.html index d8e2257..bd0df8c 100644 --- a/templates/set_password.html +++ b/templates/set_password.html @@ -1 +1 @@ -{% extends "base.html" %}{% block content %}

{{ title }}

{% with messages=get_flashed_messages(with_categories=true) %}{% for c,m in messages %}

{{ m }}

{% endfor %}{% endwith %}
{% endblock %} +{% extends "base.html" %}{% block content %}

{{ title }}

12 至 128 位，须包含大写字母、小写字母、数字和特殊字符，且不能含空格。

{% with messages=get_flashed_messages(with_categories=true) %}{% for c,m in messages %}

{{ m }}

{% endfor %}{% endwith %}
{% endblock %} diff --git a/templates/verification.html b/templates/verification.html index c4b17a6..fe5fe93 100644 --- a/templates/verification.html +++ b/templates/verification.html @@ -1 +1,120 @@ -{{ title }}

{{ title }}

验证码已发送至 {{ email }}，10 分钟内有效。

{% with messages=get_flashed_messages(with_categories=true) %}{% for c,m in messages %}

{{ m }}

{% endfor %}{% endwith %}
+ + + + + + {{ title }} | 供水管道健康评估系统 + + + +
+
+ mark_email_read +

{{ title }}

+

验证码已发送至 {{ email }}，10 分钟内有效。

+ + {% with messages = get_flashed_messages(with_categories=true) %} + {% for category, message in messages %} +

{{ message }}

+ {% endfor %} + {% endwith %} + +
+ + +
+ 请输入 6 位验证码 +
+ {% for index in range(6) %} + + {% endfor %} +
+
+ +
+ +
+ + +
+
+
+ + + diff --git a/tests/test_auth_registration.py b/tests/test_auth_registration.py index 475f49d..d662abd 100644 --- a/tests/test_auth_registration.py +++ b/tests/test_auth_registration.py @@ -2,16 +2,64 @@ from __future__ import annotations import re import unittest +from datetime import timedelta from tempfile import TemporaryDirectory from unittest.mock import patch +from flask import session + from app import create_app from app.config import Config from app.extensions import db from app.models import EmailVerificationCode, TrustedDevice, User +from app.routes import grant_fresh_authorization, has_fresh_authorization, valid_password +from app.time_utils import utc_now class EmailAuthenticationTest(unittest.TestCase): + def test_password_policy_requires_all_character_categories(self): + self.assertTrue(valid_password("Strong-password-123!")) + self.assertFalse(valid_password("lowercase-password-123!")) + self.assertFalse(valid_password("UPPERCASE-PASSWORD-123!")) + self.assertFalse(valid_password("NoSpecialPassword123")) + self.assertFalse(valid_password("NoWhitespace-123 !")) + + def test_verification_page_uses_six_code_inputs_and_initial_resend_delay(self): + with TemporaryDirectory() as directory: + app = self.create_app(directory) + client = app.test_client() + with client.session_transaction() as state: + state["pending_email"] = "alice@example.com" + state["pending_purpose"] = "login" + + response = client.get("/verify/login") + html = response.get_data(as_text=True) + + self.assertEqual(response.status_code, 200) + self.assertEqual(html.count("data-code-digit\n"), 6) + self.assertIn("60 秒后可重新发送", html) + self.assertIn('id="resendButton"', html) + + def test_fresh_authorization_is_bound_to_user_and_expires(self): + with TemporaryDirectory() as directory: + app = self.create_app(directory) + with app.app_context(): + user = User(username="Alice", email="alice@example.com", is_active_account=True) + user.set_password("Password-1234!") + db.session.add(user) + db.session.commit() + user_id = user.id + + with app.test_request_context(): + user = db.session.get(User, user_id) + grant_fresh_authorization(user, "password_change") + self.assertTrue(has_fresh_authorization(user, "password_change")) + + session["fresh_auth_password_change"]["expires_at"] = ( + utc_now() - timedelta(seconds=1) + ).isoformat() + self.assertFalse(has_fresh_authorization(user, "password_change")) + def create_app(self, directory: str): class TestConfig(Config): TESTING = True @@ -41,7 +89,7 @@ class EmailAuthenticationTest(unittest.TestCase): app = self.create_app(directory); client = app.test_client() page = client.get("/register") with client.session_transaction() as state: captcha = state["captcha"] - response = client.post("/register", data={"csrf_token": self.csrf(page), "username": "Alice", "email": "Alice@example.com", "password": "password-1234", "captcha": captcha}) + response = client.post("/register", data={"csrf_token": self.csrf(page), "username": "Alice", "email": "Alice@example.com", "password": "Password-1234!", "captcha": captcha}) self.assertEqual(response.status_code, 302) with app.app_context(): user = User.query.filter_by(email="alice@example.com").one() @@ -58,10 +106,10 @@ class EmailAuthenticationTest(unittest.TestCase): with TemporaryDirectory() as directory: app = self.create_app(directory) with app.app_context(): - user = User(username="Alice", email="alice@example.com", is_active_account=True); user.set_password("password-1234"); db.session.add(user); db.session.commit() + user = User(username="Alice", email="alice@example.com", is_active_account=True); user.set_password("Password-1234!"); db.session.add(user); db.session.commit() client = app.test_client(); page = client.get("/login") with client.session_transaction() as state: captcha = state["captcha"] - response = client.post("/login", data={"csrf_token": self.csrf(page), "email": "alice@example.com", "password": "password-1234", "captcha": captcha}) + response = client.post("/login", data={"csrf_token": self.csrf(page), "email": "alice@example.com", "password": "Password-1234!", "captcha": captcha}) self.assertEqual(response.location, "/verify/login") verify = client.get("/verify/login") response = client.post("/verify/login", data={"csrf_token": self.csrf(verify), "code": "123456"}) @@ -74,7 +122,7 @@ class EmailAuthenticationTest(unittest.TestCase): with TemporaryDirectory() as directory: app = self.create_app(directory) with app.app_context(): - user = User(username="Alice", email="alice@example.com", is_active_account=True); user.set_password("password-1234"); db.session.add(user); db.session.commit(); db.session.add(TrustedDevice(user_id=user.id, token_hash="a" * 64, auth_version=1, expires_at=__import__('app.time_utils', fromlist=['utc_now']).utc_now())); db.session.commit() + user = User(username="Alice", email="alice@example.com", is_active_account=True); user.set_password("Password-1234!"); db.session.add(user); db.session.commit(); db.session.add(TrustedDevice(user_id=user.id, token_hash="a" * 64, auth_version=1, expires_at=__import__('app.time_utils', fromlist=['utc_now']).utc_now())); db.session.commit() client = app.test_client() response = self.form(client, "/forgot-password", email="alice@example.com") self.assertEqual(response.status_code, 302) @@ -82,11 +130,11 @@ class EmailAuthenticationTest(unittest.TestCase): response = client.post("/verify/reset", data={"csrf_token": self.csrf(verify), "code": "123456"}) self.assertEqual(response.location, "/set-password") page = client.get("/set-password") - response = client.post("/set-password", data={"csrf_token": self.csrf(page), "password": "new-password-1234", "password_confirm": "new-password-1234"}) + response = client.post("/set-password", data={"csrf_token": self.csrf(page), "password": "New-password-1234!", "password_confirm": "New-password-1234!"}) self.assertEqual(response.status_code, 302) with app.app_context(): user = User.query.filter_by(email="alice@example.com").one() - self.assertTrue(user.check_password("new-password-1234")); self.assertEqual(TrustedDevice.query.count(), 0); self.assertEqual(user.auth_version, 2) + self.assertTrue(user.check_password("New-password-1234!")); self.assertEqual(TrustedDevice.query.count(), 0); self.assertEqual(user.auth_version, 2) @patch("app.routes.send_transactional_email") @patch("app.routes.secrets.randbelow", return_value=123456) @@ -94,10 +142,10 @@ class EmailAuthenticationTest(unittest.TestCase): with TemporaryDirectory() as directory: app = self.create_app(directory); client = app.test_client() with app.app_context(): - user = User(username="Alice", email="alice@example.com", is_active_account=True); user.set_password("password-1234"); db.session.add(user); db.session.commit() + user = User(username="Alice", email="alice@example.com", is_active_account=True); user.set_password("Password-1234!"); db.session.add(user); db.session.commit() page = client.get("/login") with client.session_transaction() as state: captcha = state["captcha"] - client.post("/login", data={"csrf_token": self.csrf(page), "email": "alice@example.com", "password": "password-1234", "captcha": captcha}) + client.post("/login", data={"csrf_token": self.csrf(page), "email": "alice@example.com", "password": "Password-1234!", "captcha": captcha}) for _ in range(5): page = client.get("/verify/login"); client.post("/verify/login", data={"csrf_token": self.csrf(page), "code": "000000"}) page = client.get("/verify/login"); response = client.post("/verify/login", data={"csrf_token": self.csrf(page), "code": "123456"}) diff --git a/tests/test_config.py b/tests/test_config.py new file mode 100644 index 0000000..b2d6d83 --- /dev/null +++ b/tests/test_config.py @@ -0,0 +1,7 @@ +from datetime import timedelta + +from app.config import Config + + +def test_remember_login_duration_is_seven_days(): + assert Config.REMEMBER_COOKIE_DURATION == timedelta(days=7) diff --git a/tests/test_email.py b/tests/test_email.py index ce0495b..5cc5f20 100644 --- a/tests/test_email.py +++ b/tests/test_email.py @@ -6,10 +6,35 @@ from unittest.mock import patch from app import create_app from app.config import Config -from app.email import EmailConfigurationError, send_transactional_email +from app.email import ( + EmailConfigurationError, + password_reset_notice_email, + send_transactional_email, + verification_code_email, +) class TransactionalEmailTest(unittest.TestCase): + def test_verification_email_has_branded_code_and_escapes_purpose(self): + html = verification_code_email( + code="123456", + minutes=10, + purpose="登录